www.stbensnd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d1:87:ac:31:d3:ec:24:3f:b2:da:bb:f0:4a:eb:7f:1c:e2 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stbensnd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d1:87:ac:31:d3:ec:24:3f:b2:da:bb:f0:4a:eb:7f:1c:e2
Serial Number (int): 419748498278636052237432352051832532442338
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a4:05:07:35:0f:e4:a6:44:0e:34:d5:73:6e:69:f5:49:71:f6:12:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:12:33:15:57:03:fe:3a:36:21:20:4a:10:97:75:e2:54:13:cf:5a
Fingerprint (sha256): 5f:c0:81:53:6d:16:b7:e8:ed:ca:c6:c4:32:aa:4f:af:7f:9e:26:2b:3d:8d:d9:b4:ee:82:7b:09:05:ca:6f:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stbensnd.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stbensnd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintsheights.com
catholicyouthri.com
catholicyouthri.org
centralmcleansaints.com
charityguildshop.org
corbin.cdlex.org
heargodscall.com
holy-rosary.org
kenperronbuilder.com
kidcause.org
mostblessedsacrament.org
pophouston.org.es
sacredheartofjesusonline.org
saint-albert.org
saintmartindetours.org
saintsppta.org
sanjuandiegodallas.org
sjbde.org
sjcparish.org
sjsmst.org
spxschool.org
srolparish.org
st-peter-church.com
stannegorham.com
stbensnd.org
stbernardappleton.org
stbridgetchurch.org
stceciliachurch.org
stgregorys.net
stjohnschoolwinslow.org
stjosephriovista.org
stjparish.com
stmaryelyria.org
stmaryfreeport.com
stncc.net
stpatrickindependence.com
stpaulsmissiontx.org
stphilipcs.com
stsja.org
sttheresa-littleeggharbor.com
stvincentdepauldc.org
stvincentpampa.com
tccesdover.org
thomasmorechurch.org
vitanova.org
wtcsc.org
www.allsaintsheights.com
www.catholicyouthri.com
www.catholicyouthri.org
www.centralmcleansaints.com
www.charityguildshop.org
www.csdo.org
www.heargodscall.com
www.holy-rosary.org
www.kenperronbuilder.com
www.kidcause.org
www.mostblessedsacrament.org
www.pophouston.org.es
www.sacredheartofjesusonline.org
www.saint-albert.org
www.saintmartindetours.org
www.saintsppta.org
www.sanjuandiegodallas.org
www.sjbde.org
www.sjcparish.org
www.sjsmst.org
www.spxschool.org
www.srolparish.org
www.st-peter-church.com
www.stannegorham.com
www.stbensnd.org
www.stbernardappleton.org
www.stbridgetchurch.org
www.stceciliachurch.org
www.stgregorys.net
www.stjohnschoolwinslow.org
www.stjosephriovista.org
www.stjparish.com
www.stmaryelyria.org
www.stmaryfreeport.com
www.stncc.net
www.stpatrickindependence.com
www.stpaulsmissiontx.org
www.stphilipcs.com
www.stsja.org
www.sttheresa-littleeggharbor.com
www.stvincentdepauldc.org
www.stvincentpampa.com
www.tccesdover.org
www.thomasmorechurch.org
www.vitanova.org
www.wtcsc.org
www.ymcyoprov.com
ymcyoprov.com

Other certificates including the domain name stbensnd.org

(limited to 100 certificates)
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org

Certificate

The complete raw certificate details for www.stbensnd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA7qwM2YjZasMnUk2kFY
w+Ln3l7FBf0ljj44gssgkrru48G/xz0kH6bjEZdyCithsNZWTZOWG+6/x7WDKxio
EmOL6QZb7ekN+0IMsC4KMfOJe1DWA1bRMBLGz2Eqf4588XfsrdVtezhZwaSyxUyv
/zDdtZrsIyE3Oe0VomWuLyecDDd9IjseGlVUCjX4C+YoSC3/cmX6k9xqa6E3ELWm
Hk+olN54A8FhbiuID6f0rxZxW+J41tamv/48U3cURVD+f5KGhFJkDLyITocfU5Hk
Sp6aIP/+GgNJQRxLzk+SxYpzrVmLKxGj48Chk+klgIrvjg349K1epveeKmUKEiiC
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419748498278636052237432352051832532442338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-30 06:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-28 06:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stbensnd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25759970062122543367885580171433623523056083753556153337527217713884656515012231772104182759780295474673813230416459062958254623408404164546239106471671690963526461441654814222066110618878040310416730615816493347173392656982504938757304952707639393164393797362208458277027104628647723246754887239569881867353378668187332298476282069626926300419163325452489445690070764416793291397981039600767747685697544649853666961459177885316391162172622429889188908821784414733721215812523072179284723282174762825912196864433732133532798201342135191085493313620630640880290978539640366068401301885028837620252966679131171704046133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a40507350fe4a6440e34d5736e69f54971f612ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1982 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corbin.cdlex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostblessedsacrament.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbernardappleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickindependence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csdo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostblessedsacrament.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbernardappleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickindependence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymcyoprov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcyoprov.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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